Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/F3DC25C41E4511EFBB4DF80DC4F9AE02.roa
File: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (raw, json)
Hash identifier: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=
Subject key identifier: E0:32:41:5F:95:26:37:4D:63:5D:BF:D6:D9:E9:BC:1D:31:8B:69:D8
Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Certificate serial: 3441
Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/F3DC25C41E4511EFBB4DF80DC4F9AE02.roa
Signing time: Tue 08 Oct 2024 15:31:16 +0000
ROA not before: Tue 08 Oct 2024 15:31:16 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58445
IP address blocks: 103.11.136.0/22 maxlen: 24
116.206.132.0/22 maxlen: 24
2001:df0:29f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13377 (0x3441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Validity
Not Before: Oct 8 15:31:16 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67055044-1428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:41:37:3d:8d:32:9c:14:b4:c1:f3:f1:eb:
56:63:33:52:5c:ed:4f:ee:d8:b3:33:56:e0:41:c5:
d4:d6:65:a2:ff:b9:71:d6:58:ad:ec:9e:64:b9:b6:
d2:45:86:a2:c2:a7:91:75:29:90:6e:a2:43:39:d4:
ba:f0:2d:b8:23:fc:94:09:df:1f:20:9b:73:34:a2:
58:1a:1d:15:54:38:67:dd:f0:13:10:48:6e:ae:06:
ba:9e:ed:35:66:96:6d:2a:7b:9b:fd:21:01:1c:0a:
39:ec:0d:db:00:9e:15:91:9a:d9:6f:d4:85:cc:26:
91:73:5d:58:73:f0:80:c3:58:01:c1:47:25:4f:c1:
0a:a8:b2:d1:90:b8:87:9f:97:63:f1:9b:25:31:7a:
e4:2a:62:7c:49:ec:c1:4b:f8:42:4a:42:c8:e9:cd:
d4:c0:ea:99:9c:8c:83:31:55:1f:b4:8e:ac:5c:99:
de:ae:54:db:8a:79:30:4a:14:78:bb:9b:f7:09:73:
7f:01:fc:91:d5:63:1e:7a:6c:35:e4:ba:da:0b:02:
30:6e:b9:6f:6b:88:4f:6d:24:8d:9a:12:18:8b:10:
a5:52:30:61:8f:36:66:07:40:6d:8a:09:83:4f:c5:
f9:b1:02:b7:3b:12:68:47:c1:22:e2:dd:07:08:96:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:41:5F:95:26:37:4D:63:5D:BF:D6:D9:E9:BC:1D:31:8B:69:D8
X509v3 Authority Key Identifier:
keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/F3DC25C41E4511EFBB4DF80DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.136.0/22
116.206.132.0/22
IPv6:
2001:df0:29f::/48
Signature Algorithm: sha256WithRSAEncryption
a5:b1:97:4a:99:33:04:20:ad:1d:a3:11:9e:bb:52:64:bb:91:
45:bc:c6:85:63:7c:e8:83:e4:1d:ab:8a:40:cf:78:26:37:6f:
93:27:05:57:b7:70:57:d3:fa:83:04:ab:ee:a3:b6:f8:c8:77:
45:72:1f:05:e4:53:8b:f7:86:7b:27:95:7d:02:62:00:b1:16:
05:13:70:2d:bc:99:47:7d:d4:9d:ed:34:5f:6e:94:b2:23:7c:
8f:45:81:ef:16:4d:52:47:18:6b:b4:ea:56:3b:28:39:3d:ec:
b8:e8:cc:c9:08:67:32:2c:63:62:b4:49:c4:43:ee:aa:7c:3b:
b4:c4:9a:64:ab:98:0c:72:0f:e0:a9:70:3f:cf:5a:4b:c3:4f:
eb:6b:2a:1c:b5:d0:29:53:c3:af:3a:00:98:a0:9f:51:85:e8:
f3:9a:54:46:ae:78:84:df:bc:45:09:e3:c9:4f:78:60:e6:dc:
e1:eb:9a:cf:cd:6b:a9:ac:3a:27:9c:f4:e9:c9:ce:3c:35:ec:
b4:b4:e8:0c:fa:2c:25:2e:3f:de:9f:ad:0c:c3:7b:b4:0b:5d:
51:9b:9a:70:57:9c:08:f1:cf:e0:01:0b:86:72:b9:37:f9:76:
2f:32:7f:33:29:a9:10:4d:d9:d4:b1:42:0c:0b:dd:d7:a2:be:
62:a0:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:09 2025 by rpki-client